[$] LWN.net Weekly Edition for April 16, 2026
Inside this week’s LWN.net Weekly Edition:

• Front: LLM security reports; OpenWrt One build system; Vim forks; removing read-only THPs; 7.0 statistics; MusicBrainz Picard.

• Briefs: OpenSSL 4.0.0; Relicensing; Servo; Zig 0.16.0; Quotes; …

• Announcements: Newsletters, conferences, security updates, patches, and more. ⌘ Read more

Arch Linux’s Archinstall 4.2 Fixes Botched Disk Encryption Security
Archinstall 4.2 is now available as the latest update to this very convenient, text-based Arch Linux OS installer… ⌘ Read more

iPhone、安卓现在就能跑 Gemma 4 了：Google 开源 AI Edge Gallery 应用
现在，通过 Google 的开源应用 Google AI Edge Gallery，已经可以直接在 iPhone 和安卓手机上运行 Gemma 4 E2B、E4B 两个模型了，不消耗任何 Token，能离线使用。而且不只是对话，还支持图片、语音，甚至加入了 Skills。 不用等啦，现在就能用。 G ⌘ Read more

OpenSSL 4.0.0 released
Version 4.0.0 of the OpenSSL cryptographic library has been released. This
release includes support for a number of new cryptographic algorithms and
has a number of incompatible changes as well; see the announcement for the
details. ⌘ Read more

OpenSSL 4.0 Released With Encrypted Client Hello, RFC 8998 Support
OpenSSL 4.0 was just released as a big update for this widely-used SSL/TLS and crypto library… ⌘ Read more

CPU-Z 与 HWMonitor 官网遭入侵 6 小时，下载链接被篡改，指向恶意文件[已完成修复]
如果你这两天刚刚从官网下载过 HWMonitor 和 CPU-Z，并且已经安装，就需要格外注意了。「4 月 9 日至 4 月 10 日期间」 多家媒体确认（cybernews、Tom’s Hardware、PC Gamer），以及用户社区反馈，著名的 Windows 硬件监控工具 HWM ⌘ Read more

Support For AMD GFX11.7 “RDNA 4m” Pending For RADV & RadeonSI Drivers
Back in February we were the first to report on a new AMD “RDNA 4m” target appearing in the AMDGPU LLVM shader compiler. While part of the “RDNA 4” family, it’s graphics IP version is GFX 11.7 (GFX1170) that is associated with the RDNA 3 family but with some ISA changes to align it slightly more with the newer RDNA 4 graphics IP. While the RDNA 4m AMDGPU LLVM shader compiler patches have been out for two months, the Mesa patches have only been … ⌘ Read more

Security updates for Friday
Security updates have been issued by AlmaLinux (container-tools:rhel8, fontforge, freerdp, go-toolset:rhel8, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good, kernel, kernel-rt, libtasn1, mariadb:10.11, mysql:8.4, nginx:1.24, openssh, pcs, python-jinja2, python3.9, ruby:3.1, vim, virt:rhel and virt-devel:rhel, and xmlrpc-c), Debian (libyaml-syck-perl and openssh), Fedora (cockpit, crun, dnsdist, doctl, fido-device-onboard, libcgif, libpng12, libpng15, mbedtls, o … ⌘ Read more

Vulkan 1.4.349 Released With Data Graph Optical Flow Extension
Vulkan 1.4.349 is out today as a small update to the Vulkan API specification that incorporates various fixes that accumulated over the past week. Plus there is one new extension… ⌘ Read more

本周赛博领鸡蛋[4.10~4.16]
本周赛博领鸡蛋略敷衍，Epic 把上周厂商限免的游戏《女神救地球：重生》算进了自己的限免，实际上上周的限免截止日期就是4.16。所以，本周只有一款 PC 新游戏《Prop Sumo》和一款手机游戏《Dumb Ways to Draw》。 可以直接通过网页领取，无需安装客户端，无需真的玩。 《Prop ⌘ Read more

TrueNAS 26 Beta Brings Linux 6.18 LTS + OpenZFS 2.4 Combination For NAS Devices
TrueNAS 26 Beta released today as the initial test release for this next version of this Linux-based operating system for network attached storage (NAS) devices and more… ⌘ Read more

Meta Debuts ‘Muse Spark’, First AI Model Under Alexandr Wang
Meta has launched Muse Spark, its first major AI model under Alexandr Wang’s leadership. The model was built over the past nine months and is being positioned as a significant step up from Llama 4. Axios reports: Muse Spark will power queries in the Meta AI app and Meta.ai website immediately, with plans to expand across Facebook, Instagram and WhatsApp. Th … ⌘ Read more

XDG-Desktop-Portal 1.20.4 Released To Protect Against Apps Trashing Arbitrary Host Files
In addition to the release today of Flatpak 1.16.4 for shipping new security fixes including a sandbox escape and the ability to delete host files, XDG-Desktop-Portal 1.20.4 is also now available with another security fix of its own to prevent sandboxed apps from being able to trash arbitrary host files… ⌘ Read more

Flatpak 1.16.4 Brings Important Security Fixes For Sandbox Escape & Deleting Host Files
That Flatbox app sandboxing and distribution system is out today with important security updates… ⌘ Read more

Intel QAT Driver With Linux 7.1 Adding Zstd Offload Support
The Intel QuickAssist “QAT” driver for the mainline Linux 7.1 kernel is adding support for Zstd offloading across QuickAssist Gen 4 / Gen 5 / Gen 6 accelerators for Zstandard compression as well as Zstandard decompression (limited there to the latest Gen 6 hardware)… ⌘ Read more

Security updates for Tuesday
Security updates have been issued by AlmaLinux (crun, kernel, and kernel-rt), Debian (dovecot), Fedora (calibre and nextcloud), Mageia (freerdp, polkit-122, python-nltk, python-pyasn1, vim, and xz), Red Hat (edk2 and openssl), SUSE (avahi, cockpit, python-pyOpenSSL, python311, and tar), and Ubuntu (lambdaisland-uri-clojure, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-oem-6.17, and linux-realtime-6.17). ⌘ Read more

OpenAI Calls For Robot Taxes, Public Wealth Fund, and 4-Day Workweek To Tackle AI Disruption
OpenAI is proposing (PDF) sweeping policy changes to help manage the societal disruption caused by advanced AI, including taxes on automated labor, a public wealth fund, and experiments with a four-day workweek. The company said the policy document offered a series of “initial ideas” to address … ⌘ Read more

Vulkan 1.4.348 Ships Four New Extensions - Including One To Help OpenGL Emulation
Vulkan 1.4.348 released this morning as the latest routine update to this high performance graphics and compute API. With Vulkan 1.4.348 comes four new extensions… ⌘ Read more

Raspberry Pi 4 3GB Launches, Raspberry Pi Prices Go Up Again Due To RAM
AmiMoJo shares a report from Phoronix: Raspberry Pi prices are going up yet again due to the continued memory squeeze on the industry. To help offset the memory prices for some use-cases, Raspberry Pi also announced the introduction of the Raspberry Pi 4 3GB model at $83 to help fill the void between the 2GB and 4GB options.

The … ⌘ Read more

Google Announces Gemma 4 Open AI Models, Switches To Apache 2.0 License
An anonymous reader quotes a report from Ars Technica: Google’s Gemini AI models have improved by leaps and bounds over the past year, but you can only use Gemini on Google’s terms. The company’s Gemma open-weight models have provided more freedom, but Gemma 3, which launched over a year ago, is getting a bit long in the tooth. Starti … ⌘ Read more

Raspberry Pi 4 3GB Launches, Raspberry Pi Prices Go Up Again Due To RAM
Raspberry Pi prices are going up yet again due to the continued memory squeeze on the industry. To help offset the memory prices for some use-cases, Raspberry Pi also announced the introduction of the Raspberry Pi 4 3GB model at $83 to help fill the void between the 2GB and 4GB options… ⌘ Read more

MidnightBSD 4.0.4 Released With Aged & Agectl For Age Verification/Attestation
MidnightBSD 4.0.4 is out today as the newest update to this desktop-minded BSD operating system. Notable with this update is introducing the Aged daemon and Agectl program for handling age verification and age attestation given the increasing number of US states pursuing laws around age verification at the OS user level… ⌘ Read more

MediaTek MT7927 “Filogic 380” WiFi Support Coming Together For Linux
In addition to the MediaTek MT7902 WiFI Linux support emerging in recent months, the Linux support for the MediaTek MT7927 is also coming together for WiFi 7 and Bluetooth 5.4 support for the upstream Linux kernel… ⌘ Read more

Archinstall 4.0 Released For Improved Arch Linux Installer Using Textual UI
Archinstall 4.0 is out today and just in time for the April 1 monthly refresh to the Arch Linux installer. With Archinstall 4.0, this Arch Linux OS installer is now using the Textual TUI library rather than the Curses library… ⌘ Read more

@movq@www.uninformativ.de woot! 🥳

git pull
warning: redirecting to https://movq.de/git/jenny.git/
Fetching objects: 38, done.
From https://uninformativ.de/git/jenny
   ac51ce5..f44424c  main       -> origin/main
 * [new tag]         v26.03     -> v26.03
Updating ac51ce5..f44424c
Fast-forward
 CHANGES |  4 ++++
 LICENSE |  2 +-
 README  | 10 +++++-----
 3 files changed, 10 insertions(+), 6 deletions(-)

Rspamd 4.0 Released For Open-Source Spam Filtering
Rspamd 4.0 is out today as a big update to this powerful open-source spam filtering system… ⌘ Read more

Amazon Gambles on $4B Push Into America’s Rural Areas, May Soon Carry More Parcels Than USPS
In many rural areas, America’s online shoppers can wait half a week or more for deliveries. But Amazon started a $4 billion “rural delivery push” last year, reports Bloomberg, and has now cut delivery times to under 24 hours for 1 in 5 rural and small-town households, with 48-hour delivery to 62 … ⌘ Read more

MacOS 26.4 Adds Warnings For ClickFix Attacks to Its Terminal App
An anonymous Slashdot reader writes: ClickFix attacks are ramping up. These attacks have users copy and paste a string to something that can execute a command line — like the Windows Run dialog, or a shell prompt.

But MacRumors reports that macOS 26.4 Tahoe (updated earlier this week) introduces a new feature to its Terminal app where it will … ⌘ Read more

Thousands of Americans Treated With Psilocybin in 2025
In a new 4,000-word article, CNN tells the story of a retired appellate paralegal and grandmother in her early 70s who was treated for depression with psilocybin. CNN notes there’s now retreats featuring psilocybin in a few countries — and while psilocybin is illegal under United States federal law, “In Oregon, 5,935 clients received psilocybin services through O … ⌘ Read more

The StarTalk Team Has More Questions for Neil | Burning Question Pt. 4 ⌘ Read more

Fish 4.6 Shell Brings Support For Recent systemd Environment Variables
Fish 4.6 released today as the newest version of this Rust-based interactive shell for Linux and other platforms… ⌘ Read more

AMD ROCm 7.2.1 Released With Ubuntu 24.04.4 LTS Support, Bug Fixes
Building off the release of ROCm 7.2 from January, ROCm 7.2.1 is now available with Ubuntu 24.04.4 LTS support as well as various bug fixes to this open-source AMD Radeon/Instinct GPU compute stack… ⌘ Read more

GTK3 Toolkit Winding Down To One Release Per Year
The GTK 4.0 toolkit released in December 2020 while the GTK3 toolkit has continued to be maintained given a lot of software still relying on that older version. GTK 3.24.52 was released yesterday and with this version it’s now shifting its release cadence to just one new update per year… ⌘ Read more

mdadm 4.6 Released With Boot Failure Fixes, New Lockless Bitmap
The mdadm utility for managing software RAID on Linux systems is out with a new release that adds new features while addressing some recent boot failure issues that were reported… ⌘ Read more

KDE Plasma 6.7’s KWin Lands Support For 3D LUTs To Help With Modern GPUs
In addition to releasing Plasma 6.6.3 this week, KDE developers remain quite busy working on new features for the Plasma 6.7 desktop while also already queuing some changes for the next Plasma 6.6.4 point release… ⌘ Read more

Vulkan 1.4.347 Debuts With Three New Extensions
Vulkan 1.4.347 made its debut overnight as the latest routine update to this high performance graphics and compute API. Beyond the usual maintenance churn over the past week, Vulkan 1.4.347 brings three new extensions… ⌘ Read more

Vulkan 1.4.347 Debuts With Three New Extensions
Vulkan 1.4.347 made its debut overnight as the latest routine update to this high performance graphics and compute API. Beyond the usual maintenance churn over the past week, Vulkan 1.4.347 brings three new extensions… ⌘ Read more

Samba 4.24 Released With Remote Password Management Support, Other Improvements
Samba continues strong in 2026 for this leading open-source SMB protocol re-implementation for Microsoft Windows file and print services interoperability. Samba 4.24 brings more features, including remote password management support… ⌘ Read more

Linux 7.0 Better Supporting The Logitech MX Master 4 Bluetooth Mouse
For those that happen to have the Logitech MX Master 4 wireless mouse or are considering this high-end ~$120 USD Bluetooth mouse, better support for it was merged yesterday to Linux 7.0… ⌘ Read more

CMake 4.3 Released With Package Import/Export Using The Common Package Specification
Version 4.3 of the CMake software development tool / build system was released today. Notable with CMake 4.3 is support for importing and exporting packages described using the Common Package Specification (CPS) for greater interoperability in the ecosystem… ⌘ Read more

Debian 13.4 Released With Dozens Of Fixes
Debian 13.4 rolled out today with dozens of security fixes and other general bug fixes with the updated install media for Debian 13 Trixie… ⌘ Read more

Qatar Helium Shutdown Puts Chip Supply Chain On a Two-Week Clock
Iranian drone strikes shut down a major helium facility in Qatar, removing about 30% of global helium supply and raising concerns for the semiconductor industry, which relies on the gas for chip fabrication. “QatarEnergy declared force majeure on existing contracts on March 4, freeing it from supply obligations to customers,” reports Tom’s Hardwar … ⌘ Read more

Italian Prosecutors Seek Trial For Amazon, Four Execs Over Alleged $1.4 Billion Tax Evasion
An anonymous reader quotes a report from Reuters: Milan prosecutors have requested trial for Amazon’s European unit and four of its managers over alleged tax evasion worth around $1.38 billion, two sources with direct knowledge of the matter said on Thursday. The move is unprecedented for a case o … ⌘ Read more

Strait of Hormuz Closure Triggers Work From Home, 4-Day Weeks In Asia
Asian governments are implementing emergency measures like four-day workweeks and work-from-home mandates to cope with a fuel shortage triggered by the Iran conflict and the closure of the Strait of Hormuz. “Asia is particularly dependent on oil exports from the Middle East; Japan and South Korea respectively source 90% and 70% of their … ⌘ Read more

A 1,300-Pound NASA Spacecraft To Re-Enter Earth’s Atmosphere
Van Allen Probe A, a 1,300-pound (600 kg) NASA satellite launched in 2012 to study Earth’s radiation belts, is expected to re-enter Earth’s atmosphere this week. While most of it is expected to burn up during descent, “some components may survive,” reports the BBC. “The space agency said there is a one in 4,200 chance of being harmed by a piece of the p … ⌘ Read more

OpenSSL 4.0 Alpha 1 Released With Encrypted Client Hello “ECH” & Other Features
The first alpha release of OpenSSL 4.0 is now available for testing. With OpenSSL 3.0 they are removing support for SSLv3 that has been deprecated for over one decade while also dropping OpenSSL engines and other removals while also adding in some new features… ⌘ Read more

FreeBSD 14.4 Released For Those Not Yet Ready To Move To FreeBSD 15
FreeBSD 14.4 is out today as the latest update to the aging FreeBSD 14 series for those not yet ready to upgrade to FreeBSD 15 that debuted as stable last year… ⌘ Read more

Swiss Vote Places Right To Use Cash In Country’s Constitution
Swiss voters overwhelmingly approved a constitutional amendment guaranteeing the right to use physical cash. “The vote means Switzerland will join the likes of Hungary, Slovakia and Slovenia, which have already written the right to cold, hard cash in their constitutions,” reports Politico. From the report: Official results revealed that 73.4 percent of … ⌘ Read more

Jack Dorsey’s Block Accused of ‘AI-Washing’ to Excuse Laying Off Nearly Half Its Workforce
When Block cut 4,000 jobs — nearly half its workforce — co-founder Jack Dorsey “pointed to AI as the culprit,” writes Entrepreneur magazine. “Dorsey claimed that AI tools now allow fewer employees to accomplish the same work.”

“But analysts see a different explanation: poor management.”

Block more … ⌘ Read more

Daylight Saving Time Ritual Continues. But Are There Alternatives?
Would you move sunrise to 9 a.m. in Detroit? Or to 4:11 a.m. in Seattle…
Though both options have problems, “There’s no law we can pass to move the sun to our will,” argues the president of the nonprofit “Save Standard Time”. The Associated Press explains why America remains stuck in that annual ritual making clocks “spring forward, fall backwa … ⌘ Read more